Behavioral task
behavioral1
Sample
9b661c72cce8a663828f6816350fbfdc.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
9b661c72cce8a663828f6816350fbfdc.exe
Resource
win10v2004-20231215-en
General
-
Target
9b661c72cce8a663828f6816350fbfdc
-
Size
1.3MB
-
MD5
9b661c72cce8a663828f6816350fbfdc
-
SHA1
5c9353587bee3e96a8c6bf4035a4b8f6e7bb0014
-
SHA256
43da116702dc27d04798861cad8f0c6c2afeeb772846d57e8884fc9ea3382b0e
-
SHA512
4ad62953251e19ce9ae090522e5c900f8b0d8ede328437e3f723c530e900f32d6a4e184fb7f9224065edb8966f4e3cf30949b4f069b0a82ea37098092c809ef0
-
SSDEEP
24576:93Xjhhe4MrqKyOLyiGkIXZffaqG2HXvD/EhEM5u9nrp9sXokVxg4bcp7bxReiWRA:tdorpygnGkIXZffiE/EhLIrpD4bKbbe2
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9b661c72cce8a663828f6816350fbfdc
Files
-
9b661c72cce8a663828f6816350fbfdc.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 148KB - Virtual size: 988KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.1MB - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE